Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@7.0.98 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 2.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2019-17569
|
Low: HTTP Request Smuggling |
Vulnerable |
|
CVE-2019-17563
|
Low: Session fixation |
Vulnerable |
|
GHSA-767j-jfh2-jvrc
Aliases: CVE-2019-17569 |
Potential HTTP request smuggling in Apache Tomcat The refactoring present in Apache Tomcat versions 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 … |
Vulnerable |
|
CVE-2019-17563
|
Session Fixation When using `FORM` authentication with Apache Tomcat there is a narrow window where an attacker could perform a … |
Vulnerable Vulnerable Vulnerable |